Google Empowers IT with Enhanced Control over Chrome Extensions

New Business Features for Chrome Enterprise: Enhancing Security and Management

Google has recently launched new business features aimed at assisting IT administrators in better managing Chrome browser extensions, which have become a common target for cybercriminals. With the introduction of a curated Chrome Web Store experience, organizations using Chrome Enterprise, including the free Chrome Enterprise Core package, can now display pre-approved extensions directly on the landing page. This makes it significantly easier for employees to find and install safe applications.

Curated Experience and Customization Options

The newly curated experience allows companies to promote trusted add-ons they have vetted. Administrators can create specific groups for certain extensions and customize the Chrome Web Store User Interface (UI) with their own company logos, imagery, and announcements. This level of customization not only enhances the user experience but also ensures employees are clearly aware of which extensions are safe and compliant with company policies.

Mitigating Security Risks

The ultimate goal of these new features is to prevent employees from installing potentially harmful browser extensions that could lead to security breaches. A notable concern arose from a phishing campaign in December that inserted malicious code into various Chrome extensions, including the Cyberhaven data security add-on, thereby highlighting the vulnerability of the Chrome platform.

Upcoming Controls for IT Administrators

To further bolster security measures, Google plans to roll out additional controls for IT administrators later this year. A new setting will empower admins to remotely and automatically remove extensions from users’ systems and block any future downloads. Furthermore, an upcoming feature, expected to be available early this year, will allow admins to place custom messages on extension detail pages. This will provide employees with more information regarding the compliance of these extensions with workspace usage policies.

Conclusion

With these enhancements, Google aims to fortify the security posture of organizations using Chrome Enterprise. By providing customized, vetted content and robust management tools, companies can foster a safer browsing environment, reducing the risk associated with malicious extensions.

For more information on managing Chrome extensions, reach out to your IT admin today!